shifathosn
/
rea
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
rea/scripts
History
morluto 3af3811ab0
fix: integrate 24 reviewed browser/native/semantics corrections (#815) 
* fix(reference): resolve emitted extensions to TypeScript source

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>

* test(reference): retain legitimate declaration import counterparts

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>

* fix(mcp): recognize implicit form elicitation capability

Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>

* fix(ghidra): reject contradictory NativeAOT reports

* fix(native): preserve thin architectures across echoed filename lines

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(native): preserve app bundle executable filename whitespace

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(doctor): validate Node-wrapped client policy

Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>

* fix(reference): preserve observed entry failure reasons

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>

* fix(artifacts): verify opaque bytes before reusing inventory identities

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>

* fix(browser): resolve DOM destinations against document base URL

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>

* fix: recover serialized native NIB view hierarchy

Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>

* ci: exercise native compiled NIB hierarchy regressions

Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>

* fix(deps): remediate reachable archive-parsing advisories

Two high-severity advisories are reachable from untrusted target content:

- @xmldom/xmldom 0.9.10 (via plist) parses XML plist bytes from analyzed
  app bundles in the keyed-archive reader. Refreshed to 0.9.12.
- brace-expansion 5.0.7 (via @electron/asar -> minimatch) is reached while
  analyzing untrusted ASAR archives. Refreshed to 5.0.12.

Both are in-range patch updates (plist declares ^0.9.10, minimatch declares
^5.0.5), so no source or API change is required and no direct dependency
declaration moves. Lockfile-only change.

The remaining smol-toml advisory is not included: it parses operator-owned
client configuration rather than untrusted target content, and its fix moves
outside the declared range and changes leading-BOM handling.

* fix(semantics): link wrapped arrow Promise returns

* fix(reconstruction): preserve unknown graph limitations

* fix(native): preserve exact code signing identifiers

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(native): recognize only whole otool command headers

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(native): retain nm-proven literal export names

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(javascript): project decoded file URL paths

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix: preserve explicit source-relative URL observation spelling

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(native): project Mach-O evidence into container file offsets

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(browser): normalize referrer policy fallback lists

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

---------

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>
Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>
Co-authored-by: Rudy Celekli <rudy@gradiahq.com>
Co-authored-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>
Co-authored-by: Kaoru0822 <aisakamimaki@gmail.com>
Co-authored-by: DeryFerd <deryferdikao125@gmail.com>
 		2026-10-07 10:33:10 +08:00
..
fixtures fix: integrate 24 reviewed browser/native/semantics corrections (#815) 2026-10-07 10:33:10 +08:00
lib fix: integrate 24 reviewed browser/native/semantics corrections (#815) 2026-10-07 10:33:10 +08:00
build-conformance-fixtures.mjs refactor(schema): remove data-only version markers 2026-09-29 08:45:36 +08:00
build-ghidra-nativeaot.mjs feat(ghidra): integrate optional NativeAOT metadata recovery (#748) 2026-10-07 00:57:08 +08:00
build-windows-native.mjs feat(ghidra): enable Windows x64 read-only analysis (#699) 2026-10-06 16:53:33 +08:00
check-dependency-install.mjs fix(deps): run freshness check from escaped paths 2026-07-16 19:51:25 +08:00
check-doc-facts.mjs build: add canonical product catalog and docs drift checks 2026-07-15 17:43:52 +08:00
clean-build-output.mjs refactor(mcp): make analysis states unrepresentable (#468) 2026-08-10 02:28:11 +08:00
create-ghidra-windows-fixture.mjs ci(ghidra): add Windows P0 acceptance and real-engine lanes 2026-07-17 03:05:19 +09:00
electron-active-hook-boundaries.cjs feat(electron): add autonomous Electron runtime analysis (#464) 2026-08-05 19:07:46 +08:00
electron-active-hook.cjs refactor(browser): remove arbitrary capture ceilings 2026-09-29 15:31:27 +08:00
fetch-android-fixtures.mjs feat(android): integrate static APK analysis with headless JADX (#738) 2026-10-06 12:46:48 +00:00
generate-completion-ledger.mjs feat(electron): add autonomous Electron runtime analysis (#464) 2026-08-05 19:07:46 +08:00
generate-error-schema.mjs chore: migrate formatting to Oxfmt (#615) 2026-10-06 01:59:19 +08:00
generate-firmware-fixtures.mjs feat(firmware): integrate Binwalk and Unblob analysis 2026-10-06 14:16:04 +00:00
generate-mcp-tool-catalog.mjs docs: fix architecture diagram and pretty-print tool catalog (#626) 2026-10-06 05:00:01 +08:00
generate-nativeaot-fixtures.mjs feat(ghidra): integrate optional NativeAOT metadata recovery (#748) 2026-10-07 00:57:08 +08:00
generate-package-metadata.mjs build: streamline local and CI validation 2026-07-22 16:06:28 +00:00
generate-product-catalog.mjs build: add canonical product catalog and docs drift checks 2026-07-15 17:43:52 +08:00
generate-skill-metadata.mjs feat(skill): rename skill to reverse-engineer-anything 2026-07-17 00:35:19 +00:00
hopper-demo-x11.py refactor(tools): remove remaining arbitrary workflow caps 2026-09-29 17:00:06 +08:00
prepack.mjs build: streamline local and CI validation 2026-07-22 16:06:28 +00:00
prepare.mjs build: streamline local and CI validation 2026-07-22 16:06:28 +00:00
print-mcp-config.mjs fix(npm): use latest entry points without install scripts 2026-07-17 00:16:46 +00:00
rea.mjs fix(cli): include build step in missing-runtime recovery 2026-10-05 22:19:35 -07:00
run-development-tests.mjs fix(test): improve capture reliability and runner cleanup (#609) 2026-10-06 01:32:46 +08:00
run-exclusive.mjs fix(test): improve capture reliability and runner cleanup (#609) 2026-10-06 01:32:46 +08:00
scan-todos.mjs build: shorten local validation loops 2026-07-23 03:42:41 +08:00
verify-agent-experience.mjs refactor!: simplify runtime tools and remove replay engines (#572) 2026-10-05 21:15:04 +08:00
verify-apple-dispatch.mjs feat(native): add inspection primitives, dispatch traces and approved UI observation (#500) 2026-10-04 16:02:36 +08:00
verify-asset-catalog.mjs feat(native): add inspection primitives, dispatch traces and approved UI observation (#500) 2026-10-04 16:02:36 +08:00
verify-browser-network.mjs feat(browser): capture correlated network content and lifecycle evidence (#797) 2026-10-07 04:35:49 +08:00
verify-browser-scripts.mjs feat(web): export captured scripts for JavaScript application analysis (#801) 2026-10-07 05:24:32 +08:00
verify-conformance-fixtures.mjs refactor(schema): remove data-only version markers 2026-09-29 08:45:36 +08:00
verify-interface-builder.mjs feat(native): add investigation features (#486) 2026-09-30 00:41:05 +08:00
verify-keyed-archive.mjs feat(native): add inspection primitives, dispatch traces and approved UI observation (#500) 2026-10-04 16:02:36 +08:00
verify-large-javascript-digests.mjs fix(javascript): hash graph and evidence JSON incrementally (#646) 2026-10-06 11:54:55 +08:00
verify-linux-setup-e2e.mjs feat(process): record provider and verifier run lineage 2026-07-22 14:01:47 +00:00
verify-local-application-workflows.mjs refactor: return complete tool results inline 2026-09-29 07:08:46 +08:00
verify-local-javascript-runtime.mjs refactor: return complete tool results inline 2026-09-29 07:08:46 +08:00
verify-managed-conformance.mjs fix!: repair boundary contracts across CLI and MCP (#597) 2026-10-06 00:50:38 +08:00
verify-mcp-registry-metadata.mjs feat(electron): add autonomous Electron runtime analysis (#464) 2026-08-05 19:07:46 +08:00
verify-native-ui.mjs fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
verify-package-artifact.mjs feat(native): add investigation features (#486) 2026-09-30 00:41:05 +08:00
verify-package-capabilities.mjs feat(native): add investigation features (#486) 2026-09-30 00:41:05 +08:00
verify-package-discovery.d.mts fix(package): separate agent and Hopper setup support (#584) 2026-10-06 00:00:15 +08:00
verify-package-discovery.mjs fix(package): separate agent and Hopper setup support (#584) 2026-10-06 00:00:15 +08:00
verify-package-environment.d.mts fix(test): use direct Node launcher on macOS 2026-07-24 03:31:26 +00:00
verify-package-environment.mjs test(setup): isolate client fixtures across host platforms 2026-10-05 23:13:56 +08:00
verify-package-evidence.mjs refactor(adapters): split oversized provider workflows 2026-07-18 05:49:14 +00:00
verify-package-install.mjs build: streamline local and CI validation 2026-07-22 16:06:28 +00:00
verify-package-managed.mjs fix: integrate 14 approved fix PRs (668,671,673,675,678-681,685-690) (#705) 2026-10-06 16:31:00 +08:00
verify-package-mcp.mjs fix(mcp): return complete inline Evidence records (#585) 2026-10-06 00:10:31 +08:00
verify-package-pack.mjs feat(electron): add autonomous Electron runtime analysis (#464) 2026-08-05 19:07:46 +08:00
verify-package-platform.d.mts fix: consolidate boundary ownership and cleanup failure paths (#477) 2026-09-08 10:59:13 +08:00
verify-package-platform.mjs refactor: return complete tool results inline 2026-09-29 07:08:46 +08:00
verify-package-prompts.mjs Merge remote-tracking branch 'origin/main' into feat/mcp-prompts-completion 2026-07-14 04:55:38 +08:00
verify-package-setup.mjs docs: clarify onboarding and align provider guidance (#745) 2026-10-06 22:57:36 +08:00
verify-package-unknown-provider.mjs refactor(adapters): split oversized provider workflows 2026-07-18 05:49:14 +00:00
verify-package-update.mjs feat(setup)!: expand agent integrations and verify updates (#577) 2026-10-05 23:06:19 +08:00
verify-package.mjs fix(mcp): return complete inline Evidence records (#585) 2026-10-06 00:10:31 +08:00
verify-packaged-ghidra-windows.mjs fix(ghidra): select exact packaged bridge scripts (#800) 2026-10-07 04:54:52 +08:00
verify-packed-bridge.mjs feat(ghidra): add atomic function annotation edits (#709) 2026-10-06 17:24:33 +08:00
verify-published-package.mjs feat(setup)!: expand agent integrations and verify updates (#577) 2026-10-05 23:06:19 +08:00
verify-real-android.mjs feat(android): integrate static APK analysis with headless JADX (#738) 2026-10-06 12:46:48 +00:00
verify-real-browser.mjs feat(web): export captured scripts for JavaScript application analysis (#801) 2026-10-07 05:24:32 +08:00
verify-real-electron.mjs fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
verify-real-firmware.mjs feat(firmware): integrate Binwalk and Unblob analysis 2026-10-06 14:16:04 +00:00
verify-real-ghidra-assertions.mjs fix(ghidra): recover evidenced switch cases and default targets (#579) 2026-10-05 22:54:17 +08:00
verify-real-ghidra-com.mjs feat(ghidra): add atomic function annotation edits (#709) 2026-10-06 17:24:33 +08:00
verify-real-ghidra-dos.mjs feat(ghidra): add atomic function annotation edits (#709) 2026-10-06 17:24:33 +08:00
verify-real-ghidra-function.mjs fix(ghidra): recover evidenced switch cases and default targets (#579) 2026-10-05 22:54:17 +08:00
verify-real-ghidra-inventory.mjs feat(native): add investigation features (#486) 2026-09-30 00:41:05 +08:00
verify-real-ghidra-nativeaot.mjs feat(ghidra): integrate optional NativeAOT metadata recovery (#748) 2026-10-07 00:57:08 +08:00
verify-real-ghidra-switch-assertions.mjs fix(ghidra): recover evidenced switch cases and default targets (#579) 2026-10-05 22:54:17 +08:00
verify-real-ghidra-switch-controls.mjs chore: migrate formatting to Oxfmt (#615) 2026-10-06 01:59:19 +08:00
verify-real-ghidra-switch.mjs chore: migrate formatting to Oxfmt (#615) 2026-10-06 01:59:19 +08:00
verify-real-ghidra-windows.mjs feat(ghidra): add atomic function annotation edits (#709) 2026-10-06 17:24:33 +08:00
verify-real-ghidra.mjs fix(ghidra): recover evidenced switch cases and default targets (#579) 2026-10-05 22:54:17 +08:00
verify-real-hopper-linux.mjs feat(process): record provider and verifier run lineage 2026-07-22 14:01:47 +00:00
verify-real-hopper.mjs fix: correct native inventories and bridge error classification (#503) 2026-10-04 17:25:09 +08:00
verify-real-ida.mjs feat(ida): add read-only GUI and headless MCP providers (#754) 2026-10-07 01:47:05 +08:00
verify-real-javascript-runtime-observation.mjs fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
verify-reconstruction-readiness.mjs refactor(contracts): simplify workflows and drop readiness tool 2026-09-29 09:22:44 +08:00
verify-test-temp-hygiene.mjs feat: complete REA remediation program 2026-07-22 22:09:12 +09:00
verify-windows-native-artifact.mjs feat(ghidra): enable Windows x64 read-only analysis (#699) 2026-10-06 16:53:33 +08:00
verify-windows-native.mjs fix(windows): accept ordinary drive path separators (#791) 2026-10-07 03:51:59 +08:00
verify-windows-package.mjs feat(ghidra): enable Windows x64 read-only analysis (#699) 2026-10-06 16:53:33 +08:00
windows-capabilities.mjs feat(ghidra): define the Windows P0 admission boundary 2026-07-17 03:05:19 +09:00